ID. Date of interview 
date 44/02/20 


ID. Time interview started 
start 11:28:46 


ID.end Completion date of interview 
Date 44/02/20 


ID.end Time interview ended 
11:38:42 


ID. Duration of interview 
time 9.93 


new Case 


ICO consultation on the draft right of access 
guidance 


Q1 


Does the draft guidance cover the relevant issues about the right of access? 
© Yes 
©) No 

©) Unsure / don't know 

If no or unsure/don’t know, what other issues would you like to be covered in it? 


Q2 


Does the draft guidance contain the right level of detail? 


© Yes 
©) No 

©) Unsure / don't know 

If no or unsure/don't know, in what areas should there be more detail within the draft 
guidance? 


Q3 


Does the draft guidance contain enough examples? 
© Yes 
—) No 

©) Unsure / don't know 

If no or unsure/don’t know, please provide any examples that think should be included in 
the draft guidance. 


Q4 


We have found that data protection professionals often struggle with applying and 
defining ‘manifestly 

unfounded or excessive’ subject access requests. We would like to include a wide 

range of examples 

from a variety of sectors to help you. Please provide some examples of manifestly 
unfounded and excessive 

requests below (if applicable). 


N/A 


Q5 


Q6 


Q7 


On a scale of 1-5 how useful is the draft guidance? 


3 ee: 
1-Notatall 2-—Slightly | Moderately 4-Very 5-Extremely 
useful useful useful useful useful 


C) ©) O ©) () 


Why have you given this score? 


It’s much more detailed than the current live guidance, particularly around complex, 
manifestly unfounded or excessive requests. 


To what extent do you agree that the draft guidance is clear and easy to understand? 


Strongly Neither agree Strongly 
disagree Disagree nor disagree Agree agree 


O O o) 


Q8 


Q9 


Please provide any further comments or suggestions you may have about the draft 
guidance. 


I do have to disagree with the new timescale of the SAR deadline. I do feel that, if 
an organization is requesting more information around what data the subject wants, 
or for any clarity about their request (excluding for identification purposes), the 
deadline should not be started. If we believe a request is excessive or manifestly 
unfounded, we would ask for this information to either prove or disprove our initial 
judgement. I believe it is entirely valid to hold on the deadline until this information 
has been confirmed by the data subject, especially if it is a data subject whom we 
hold a large amount of data for on a variety of systems. I do not believe this would 
greatly affect the data subject or their rights but would make it much more difficult 
for organizations to comply with the request. I feel as long as it is made clear by the 
organization that the deadline will not start until we have received all relevant 
information, this should be sufficient. 


Are you answering as: 


O An individual acting in a private capacity (eg someone providing their views as a member of the public) 
() An individual acting in a professional capacity 
( `) On behalf of an organisation 


© Other 


Please specify the name of your organisation: 


What sector are you from: 


Q10 How did you find out about this survey? 
©) ICO Twitter account 
(|) ICO Facebook account 
©) ICO LinkedIn account 
© ICO website 
©) ICO newsletter 
C) ICO staff member 
C) Colleague 
©) Personal/work Twitter account 
(`) Personal/work Facebook account 
() Personal/work LinkedIn account 
O Other 
If other please specify: 


